Kiell Tampubolon

MCP's stateless revision moves session continuity into a string the model repeats back

Removing initialize and Mcp-Session-Id lets MCP servers sit behind a plain round-robin load balancer. The handle pattern that replaces them keeps whatever authorizes the next call in the same buffer as attacker-controlled text.